diff --git a/.custodian-brief.md b/.custodian-brief.md
index 02f81cd..7502b4f 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — flex-auth
 
 **Domain:** infotech  
-**Last synced:** 2026-09-20 21:56 UTC  
+**Last synced:** 2026-09-20 22:16 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -23,6 +23,12 @@ Progress: 1/3 done  |  workplan_id: `804c588c-f47a-50c4-bdd7-51b24bbf9539`
 - ! 2. Encode the relation, or record that there is none  `712ac826`
 - ► 1. Get the intended tenant relation from tenant-engine  `a84dcee5`
 
+### The layer declaration pins a version it should not, and four security-relevant peers do not declare at all
+Progress: 3/4 done  |  workplan_id: `abe60f5f-79cc-5857-b9e8-a46bed704279`
+
+**Open tasks:**
+- ► 4. Raise the conflicting and unclear boundaries for resolution  `70786e6d`
+
 ### Repository identity migration from flex-auth to access-engine
 Progress: 3/11 done  |  workplan_id: `99a661a8-b36c-5c1c-b78b-1e8930bcd0a9`